US10068111B2 - Method and system for marking manufactured items to detect unauthorized refilling - Google Patents

Method and system for marking manufactured items to detect unauthorized refilling Download PDF

Info

Publication number
US10068111B2
US10068111B2 US15/317,517 US201515317517A US10068111B2 US 10068111 B2 US10068111 B2 US 10068111B2 US 201515317517 A US201515317517 A US 201515317517A US 10068111 B2 US10068111 B2 US 10068111B2
Authority
US
United States
Prior art keywords
code
container
closure
manufactured item
derived
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
US15/317,517
Other languages
English (en)
Other versions
US20170109549A1 (en
Inventor
Erwan Pierre Marie Fradet
Patrick Chanez
Philippe Chatelain
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inexto SA
Original Assignee
Inexto SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inexto SA filed Critical Inexto SA
Assigned to INEXTO SA reassignment INEXTO SA ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: CHANEZ, PATRICK, CHATELAIN, PHILIPPE, FRADET, Erwan Pierre Marie
Publication of US20170109549A1 publication Critical patent/US20170109549A1/en
Application granted granted Critical
Publication of US10068111B2 publication Critical patent/US10068111B2/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K1/00—Methods or arrangements for marking the record carrier in digital fashion
    • G06K1/12—Methods or arrangements for marking the record carrier in digital fashion otherwise than by punching
    • G06K1/121—Methods or arrangements for marking the record carrier in digital fashion otherwise than by punching by printing code marks
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/06009—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code with optically detectable marking
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/10—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation
    • G06K7/10544—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation by scanning of the records by radiation in the optical part of the electromagnetic spectrum
    • G06K7/10821—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation by scanning of the records by radiation in the optical part of the electromagnetic spectrum further details of bar or optical code scanning devices
    • G06K7/10861—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation by scanning of the records by radiation in the optical part of the electromagnetic spectrum further details of bar or optical code scanning devices sensing of data fields affixed to objects or articles, e.g. coded labels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0618—Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Definitions

  • the present invention relates to a method and apparatus for marking a manufactured item comprising a container and a closure for the container.
  • the invention addresses the problem of detecting the re-filling of containers with counterfeit products.
  • Counterfeiting is the process of fraudulently manufacturing, altering, or distributing a product that is of lesser value than the genuine product. Anything that can be made can be counterfeited.
  • Counterfeit goods include not only clothing, jewellery, purses, CDs, and DVDs, but also baby formula, medications, cigarettes, electronic equipment and parts, airplane and automobile parts, and toys. Although some believe counterfeiting is a victimless crime, it has many far-reaching consequences. To begin with, depending upon the nature of the product being counterfeited, there can be serious health and safety concerns for consumers, such as in the examples of counterfeit baby formula, toys for children, medications, car parts, or electronic goods. In nearly every instance, counterfeited goods are not made with the same quality materials or to the same high standards as the original.
  • counterfeiting damages brand owners' reputations and lowers consumer confidence in the affected brands. Counterfeiting also damages brand owners and retailers selling legitimate products by causing missed sales opportunities and actual job losses by manufacturers and retailers. Consumer confidence and the value of branding may suffer when purchasers discover that the product they bought, believing that it was being sold under a recognized brand, is in fact not authentic. The damages does not stop with brand owners and consumers because counterfeiting also deprives national economies of customs duties and tax revenues.
  • the re-filling of containers can also be used as a means of evading tax.
  • the refilling of already-used containers can also pose a health risk because the counterfeit products could be of inferior quality to authentic goods.
  • a method for marking a manufactured item comprising:
  • first code and the second code are different but interrelated such that at least a portion of one of the first code and the second code can be derived from the other of the first code and the second code.
  • the first code and second code may be generated from the same item specific identifier using different code generation processes, or using different encryption keys in an identical code generation process.
  • a portion of the first or second code may be derived by performing a cryptographic process on the other of the first or second code.
  • the cryptographic process may comprise a cryptographic hashing, key hashing, symmetric encryption, asymmetric encryption or any combination of these processes.
  • the cryptographic process may comprise combining the other of the first or second code with secret information.
  • the secret information may be derived from at least a portion of the first or second code.
  • the first or second code, or both the first and second code may encode production details for the manufactured item.
  • the production details may uniquely identify the manufactured item from within a batch of manufactured items.
  • At least a portion of one of the first code and the second code may be derived by looking up data associated with the other of the first and second codes in an electronic database.
  • One or both of the first and second codes may be positioned such that a portion of the code is on the container and another portion of the code is on the closure. The code is then destroyed when the closure is removed from the container.
  • the method may be carried out in a production line in which a plurality of containers are filled and closed with a closure.
  • the method may comprise marking the containers with a first marking means and marking the closures with a second marking means.
  • the method may comprise monitoring the containers through the production line and controlling the first and second marking means to ensure that the corresponding first and second codes are applied to the same manufactured item.
  • the first and second marking means may be controlled to ensure that the first and second codes on each final manufactured item correspond to each other.
  • the closure may be marked by the second marking means before or after the closure is placed on the container.
  • a method in accordance with the invention allows for direct and online serialization of containers during the first filling process. And it can be easily incorporated into existing tracking and tracing systems configured to allow the tracking of product batches through a supply chain (for regulatory compliance, product recalls etc.). It is a very low cost solution, as it does not require any special hardware or the printing or application of special labels, such as banderoles.
  • a method in accordance with the present invention can be implemented using standard industry printing and vision systems, making it affordable for small to medium-sized manufacturers.
  • the method of the present invention also offers substantial material savings and environmental benefits compared with some alternative solutions. With the method of the present invention there is no need to produce, ship, process, and reconcile banderoles, which means that paper use is reduced, and the environmentally damaging chemical ingredients that are used in security inks are not needed.
  • At least one of the first and second codes may be a human readable code. At least one of the first and second codes may be a machine readable code.
  • the container may comprise a bottle and the closure may comprise a cap.
  • a method of authenticating a manufactured item comprising a container and a removable closure for the container, the manufactured item marked in accordance with any one of the preceding claims, comprising:
  • an apparatus for marking a manufactured item comprising a container and a removable closure for the container, the apparatus comprising:
  • one or more computer processors for generating a first code for the container and a second code for the closure
  • At least one marker configured to mark the container with the first code and the closure with the second code
  • the one or more computer processors are configured or programmed to generate the first code and the second code so that the first code and the second code are different but interrelated such that at least a portion of one of the first code and the second code can be derived from the other of the first code and the second code.
  • the apparatus may form part of a production line in which a plurality of containers are filled and closed with a closure to form manufactured items.
  • the apparatus may comprise a first marking means for marking the containers and a second marking means for marking the closures.
  • the apparatus may further comprise a controller and one or more sensors configured to monitor the containers through the production line and control the first and second marking means to ensure that the corresponding first and second codes are applied to the same manufactured item.
  • the container may comprise a bottle and the closure may comprise a cap.
  • the first or second code may be placed on the closure or container such that it is destroyed during removal of the closure from the container.
  • a manufactured item comprising a container and a closure, wherein the container is marked with first code and the closure is marked with a second code, wherein the first code and the second code are different but interrelated such that at least a portion of one of the first code and the second code can be derived from the other of the first code and the second code.
  • the container may comprise a bottle and the closure may comprise a cap.
  • the first or second code may be placed on the closure or container such that it must be destroyed during removal of the closure from the container.
  • the one or more computer processors of the third aspect of the invention may be configured or programmed to generate first and second codes in accordance with the first aspect of the invention
  • FIG. 1 is a schematic illustration of a container and closure marked in accordance with the invention
  • FIG. 2 is a schematic illustration of a marking system in accordance with the invention.
  • FIG. 3 is a schematic illustration of a marking and authentication system in accordance with the invention.
  • FIG. 4 is a flow diagram illustrating an authentication process in accordance with the invention.
  • FIG. 1 illustrates a container 10 for a product such a medicine or an alcoholic beverage.
  • the container 10 is a bottle with an open neck that is closed by a closure 12 .
  • a first label 14 is adhered to the container 14 and includes a first code 16 .
  • the first code has a machine readable portion and a human readable portion encoding the same information.
  • a second code 18 is printed on a cover sealing the closure 12 .
  • the second code is a machine readable code, derived from or related to the first code 16 . In order to remove the closure, the cover must be broken, which then renders the second code unreadable.
  • FIG. 2 is a schematic illustration of a system for marking a container of the type illustrated in FIG. 1 within a production centre.
  • the bottle 10 is filled and a unique product identifier for the bottle is generated at processor 20 .
  • the unique product identifier may include production details for the product in the bottle.
  • the production details may comprise the time of production, details of the product, a batch number and details of the production or filling line.
  • the UPI is sent to a code generator 22 , which generates a first code using the UPI and secret information known to the producer.
  • the first code may be generated using any suitable technique and some examples are described below.
  • the first code is sent to a marker, in this case a printer 24 , and printed onto a label 14 which is applied to the bottle 10 .
  • the code generator 22 generates a second code using the UPI and different secret information known only to the manufacturer.
  • the second code 18 is applied to the closure 12 by marker 26 .
  • the first code may be subsequently read by reader device, such as an optical scanner, and then decoded.
  • a second code generator then uses the read and decoded first code to generate the second code 16 .
  • the second code generator may perform a hash function on a portion of the first code or may generate the second code in another manner, examples of which are described below.
  • a control unit 30 In order to ensure that corresponding first and second codes are applied to the same final manufactured item, a control unit 30 , together with one or more sensors 32 are used to track the containers and closures within the production centre. The control unit controls printer 26 to ensure that the correct code is applied to each closure.
  • the UPI or other information may be stored locally or remotely from the production centre.
  • a verifier can reconstruct the second code (or information derivable from the second code) from the first code and compare the reconstructed second code with a read second code. If they are not identical, the closure and container do not match and it can deduced that the container has been refilled.
  • the first code or the second code, or both can be checked to determine if they are genuine codes by comparing them or portions of them with data held by the producer or sent to a verification centre by the producer.
  • the second code is derived directly from the UPI rather than the first code, however, the first and second codes may alternatively be interrelated in another ways.
  • the second code may be generated directly from the first code.
  • the second code may be derived from the same UPI and additional information, but using a different encryption technique or with an additional encryption process. Any interrelationship may be used that allows a verifier to derive the second code from the first code.
  • the first and second codes are marked onto the container and closure.
  • the first code is printed onto an adhesive label and the second code is printed on a closure seal, such as a foil on the neck of a bottle.
  • any suitable marking means may be used, for example but not limited to, a continuous ink jet printer, a drop-on-demand ink jet printer, a holographic printer, a laser printer, or any other printer or marker that allows printing or marking of the generated codes on the individual containers and closures.
  • the printing or marking of the generated codes may be directly on each item, on labels or in any other convenient way.
  • the generated codes are printed by a laser beam on a layer of laser-sensitive material deposited on the container or closure. This method allows a code to be impressed through a transparent wrapping layer.
  • FIG. 3 is a schematic view of a system according to one embodiment of the invention.
  • system 101 comprises one or more production centres 103 , 105 , 107 for producing filled containers 109 .
  • production is carried out in batches, each batch being dedicated to the production of a certain number of individual filled containers. If there are two or more production centres, these may be physically located at the same or different manufacturing sites.
  • the system includes production centres 103 , 105 , 107 , but the invention may in fact be performed at an importation point, a distribution point, a purchaser, a wholesaler or any other point in the supply chain.
  • Each production centre includes a code generator 111 for generating codes for the manufactured items 109 , as described with reference to FIG. 2 .
  • the code generators 111 are fully autonomous computers or microcontrollers dedicated to a particular production centre.
  • the system 101 further comprises a verification centre 114 which includes a key generator 115 for generating keys 209 , 211 for use in the marking and authenticating of filled containers and a central server 117 .
  • the code generators 111 can communicate with the verification centre 114 via a secure internet connection 119 and a server 121 local to the production centre, or by other data communication means.
  • the code generators 111 might communicate with the verification centre via a manufacturing portal dedicated to one or more production centres.
  • the key generator 115 generates a cryptographic key, herein referred to as a static key.
  • the key generator 115 generates an unencrypted version of the static key and an encrypted version of the static key.
  • the unencrypted version of the static key herein referred to as the active static key 209
  • the encrypted version of the static key herein referred to as the inactive static key 211
  • the active static key 209 that is to say the unencrypted version of the static key, is generated in the key generator 115 and is therefore accessible to the central server 117 .
  • the key generator 115 sends the inactive static key 211 to the code generators 111 at the production centre 103 , 105 , 107 .
  • the inactive static key 211 may be sent from the key generator 115 to the code generators 111 on a non-volatile data support, for example a CD-Rom, a DVD-Rom or a removable hard disk.
  • the data support is physically transferred to the code generator 111 at the production centre 103 , 105 , 107 .
  • the inactive static key 211 may be sent from the key generator 115 to the code generator 111 via a secure network connection, for example one involving encryption. This may be on request from the code generator 111 . This ensures authenticity, confidentiality and integrity of the static key.
  • the key generator 115 also generates the activation code 213 , which comprises the key or code for decrypting the inactive static key 211 to form the active static key 209 .
  • This activation code 213 is also accessible to the central server 117 .
  • the active static key 209 and activation code 213 are stored together with identification of the production centre 103 , 105 , 107 to which they are allocated.
  • the static key comprises a number of portions.
  • the primary portion may be a plurality of secret codes, for example a salt matrix.
  • a salt matrix may be, for example, a long string of random or pseudorandom digits of characters.
  • the number of portions may further include a unique identifier for the static key, a serialized code defining how the static key is to be combined with a dynamic key (discussed below), a digital cryptographic certificate associated the static key's unique identifier and a static key policy or license that contains the digital cryptographic certificate generated above.
  • the inactive static key that is to say the encrypted version of the static key, and particularly the plurality of secret codes, is encrypted using a strong cipher.
  • a suitable cipher is the Triple DES (Data Encryption Standard) block cipher or the Triple DES/Rijandel block cipher. Both apply the Data Encryption Standard cipher algorithm three times to each data block and the Triple DES/Rijandel is a minor variation of the Triple DES which has been developed by IBM. In that case, the Triple DES or Triple Des/Rijandel key comprises the activation code 213 .
  • the active static key 209 is unencrypted
  • the inactive key 211 is encrypted using the Triple DES or Triple Des/Rijandel key
  • the activation code 213 comprises that Triple DES or Triple Des/Rijandel key.
  • the inactive static key 211 received by the code generator 111 is registered. This is done by the code generator 111 sending to the verification centre 114 information 215 about the received static key and any relevant machine information (not shown). This is preferably sent via secure internet connection 119 , as shown in FIG. 3 , but may be sent by another suitable route.
  • the verification centre 114 sends back to the code generator 111 the activation code 213 .
  • the activation code 213 allows the inactive static key 211 to be activated, and this is shown schematically at 217 .
  • the activation code 213 is preferably also sent via secure internet connection 119 , as shown in FIG. 3 .
  • the registration procedure is preferably arranged such that the active static key 209 is never transferred over the internet.
  • the registration procedure may take the form of a conventional public/private key pair exchange mechanism. This may use an asymmetric key pair associated with the digital cryptographic certificate forming part of the static key, as discussed above.
  • the public key of the asymmetric key pair may be in the form of a key issued by a third party, for example, a government authority.
  • the information 215 about the received static key which is sent from the code generator 111 to the verification centre 114 may comprise the unique identifier for the static key which forms part of the static key, as discussed above.
  • the relevant machine information (not shown) which is also sent from the code generator 111 to the verification centre 114 may comprise a unique identifier or certificate for the code generator 111 or production centre.
  • That unique identifier may include information about the location and identity of the code generator or production centre, which has been pre-authorized for production.
  • the static key unique identifier and the code generator or production centre identifier are encrypted using the public key of the asymmetric key pair associated with the certificate of the static key.
  • the verification centre 114 can decrypt using the private key of the asymmetric key pair associated with the certificate of the static key. The verification centre may then check that the static key unique identifier and the code generator or production centre identifier are valid. Then, the verification centre 114 sends back to the code generator 111 the activation code 213 .
  • the activation code 213 is in the form of a Triple DES or Triple DES/Rijandel cipher.
  • the verification centre encrypts the activation code (for example the Triple DES or Triple DES/Rijandel cipher) with the public key of the asymmetric key pair associated with the certificate of the static key.
  • the inactive static key 211 can be activated using the decrypted activation code 213 in order to form the active static key 209 .
  • the production centre is able to produce codes for the containers and closures at the code generator 111 .
  • the code generator 111 generates a new key, herein referred to as dynamic key 219 , for each batch of containers.
  • the dynamic key 219 is preferably a random secret code, such as a random number.
  • the code generator uses the dynamic key 219 for a batch, together with the active static key 209 , to generate a secret key 223 .
  • the secret key 223 is then used in combination with the unique product identifier (UPI) for each item to generate codes 221 (for example alpha-numeric codes) to be marked onto the manufactured items in that batch.
  • the UPI for each item comprises production details identifying the time of production together with an incremental counter value to distinguish items produced within a single time period by the same production centre.
  • the code generator uses a cryptographic hash function on a combination of the UPI with the secret key. This creates a digital fingerprint, referred to herein as a “noise value”, for the container or closure, and these noise values are used to generate the codes 221 that are marked on the containers and closures.
  • a variety of techniques are available for generating the hash values or noise values, including, but not limited to: transposition, substitution, table substitution and indexing.
  • the secret key is first derived from the active static key, the dynamic key for the container and the UPI.
  • the dynamic key 219 and the active static key 209 are known only to the verification centre 114 and the code generator 111 .
  • the dynamic key and the UPI are used to extract the secret key from the salt matrix contained in the static key, in accordance with the serialized code within the static key.
  • the secret key 223 and UPI 221 are then hashed to produce the container noise value.
  • the same process, with a different dynamic key, is followed for the closure.
  • the hash function used to generate the container noise value may be the same or different to the hash function used to generate the closure noise value.
  • the container noise value and the UPI are combined and then encrypted by a code generator obfuscation key (CGOK) 231 to produce a first identifier.
  • the CGOK is particular to the code generator and is pre-loaded onto the code generator.
  • the first identifier may then be combined with a code generator identifier.
  • the code generator identifier (CGID) allows the CGOK to be obtained during authentication.
  • the combination of the first identifier, and the CGID is then encrypted using a global key to produce the first code 16 .
  • the global key 235 is common to all production centres, and may be part of a symmetric or asymmetric key pair known by the verification centre.
  • the first code is then marked on the container using marker 113 .
  • the closure noise value and the UPI are combined and then encrypted by a code generator obfuscation key (CGOK) 231 to produce a second identifier.
  • the CGOK is particular to the code generator and is pre-loaded onto the code generator.
  • the second identifier is then combined with the CGID.
  • the combination of the second identifier, and the CGID is then encrypted using the global key to produce the second code 16 .
  • the second code is then marked on the container
  • the code generator 111 or production centre 103 , 105 , 107 keeps a count of the codes which are marked onto the containers and/or the closures.
  • the code generator 111 sends the dynamic key 219 for each batch, together with information about the batch (not shown), to the verification centre 114 . This may be performed via secure internet connection 119 .
  • the information about the batch may include various pieces of information, for example but not limited to brand, intended market or intended destination.
  • the dynamic keys 219 do not need to be sent to the verification centre 114 in real-time and can be communicated to the verification centre at any appropriate time, for example monthly.
  • the dynamic keys 219 sent to the verification centre 114 are stored in a database (for example at central server 117 ) at or accessible from the verification centre 114 .
  • the dynamic key 219 for each batch is preferably stored together with the batch information sent to the verification centre 114 at the same time.
  • the active static key 209 is deleted when the code generator 111 at a particular production centre 103 , 105 , 107 is put out of service. This prevents a malicious user from gaining access to the active static key 209 without proper registration. Additional means for disabling the code generator 111 and preventing unauthorized use of the code generator 111 and production centre may be provided.
  • the codes for the container and corresponding closure are based on the same UPI but use different dynamic keys.
  • the second code may be generated using the same dynamic key as the first code but using a different hash function or a different obfuscation technique.
  • the second code may be based on the same UPI and the same or different secret key as the first code, but may be generated using an entirely different encryption process.
  • the second code may be generated directly from the first code, using a further encryption or obfuscation step.
  • the second code may correspond to the first identifier, i.e. the second code may be a version of the first code that has undergone fewer encryption stages.
  • FIG. 4 is a flow diagram of an authentication process in accordance with the invention.
  • the first code is read from the container by a user 601 (shown in FIG. 3 ) and sends it to the verification centre 114 .
  • the user 601 may send the code to the verification centre 114 by any suitable means such as a secure or non-secure internet connection.
  • the verification centre receives the first code.
  • the first code is decrypted using the global key (or the corresponding key in the key pair if asymmetric keys are used) in step 410 to reveal the first identifier.
  • the CGID is also revealed.
  • the CGOK is then obtained from the CGID.
  • the first ID is then decrypted using the CGOK to reveal the first noise and the UPI.
  • the active static key 209 and dynamic key 219 for both the container and for the closure are retrieved based on the UPI.
  • the first noise can be recreated in step 430 and the second noise recreated in step 440 .
  • the recreated first noise can be compared with the first noise retrieved from the read first code in step 480 .
  • the second noise recreated from the read first code can be compared with a read value of the second noise.
  • the verification receives from the user a read value for the second code.
  • the second noise is then retrieved from the read value of the second noise using the global, key and the CGOK. If the value of the second noise obtained from reading the second code matches the value of the second noise generated from the first code, then the container and closure can be considered to match and no refilling occurred.
  • encryption means the process of transforming information using an algorithm to make that information unreadable to anyone except those possessing special knowledge in the form of an encryption key. Decryption is the reverse process.
  • An “encryption key” is a piece of information that is used together with an encryption algorithm to encrypt or decrypt information.
  • An encryption key is typically a numerical or alphanumerical sequence or value.
  • secret key is used to describe a key used in a keyed hash that is generated using a unique product identifier and one or more additional keys or pieces of data. At the time it is generated, the secret key is not known by any other party than the party who created the secret key.
  • secret key in this context is not limited to mean a private key in the context of an asymmetric encryption scheme.
  • a “hash function” is a function that maps input data to a fixed size output (usually smaller than the input data) called a hash value.
  • a hash function typically substitutes or transposes, or substitutes and transposes, the information to create the hash value or noise value.
  • the hash function is a cryptographic hash function.
  • the cryptographic hash function produces a fingerprint or checksum of the input data. Two pieces of data can be assumed to be identical if using the same cryptographic hash function they produce the same hash value.
  • the hash function is a one-way hash function, which means that it is computationally impossible to derive the input data from the hash value. These properties can be used in an authentication process, as will be described.
  • a hash function can be keyed by combining a secret key and an input message in order to create a keyed hash value or noise.
  • noise value means a hash value, or a keyed hash value, or a value or character sequence derived directly from a hash value and a secret key.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Electromagnetism (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Toxicology (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Details Of Rigid Or Semi-Rigid Containers (AREA)
  • Closures For Containers (AREA)
  • Auxiliary Devices For And Details Of Packaging Control (AREA)
  • General Factory Administration (AREA)
US15/317,517 2014-06-23 2015-06-19 Method and system for marking manufactured items to detect unauthorized refilling Active US10068111B2 (en)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
EP14173470 2014-06-23
EP14173470 2014-06-23
EP14173470.7 2014-06-23
PCT/EP2015/063839 WO2015197494A1 (en) 2014-06-23 2015-06-19 Method and system for marking manufactured items to detect unauthorised refilling

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2015/063839 A-371-Of-International WO2015197494A1 (en) 2014-06-23 2015-06-19 Method and system for marking manufactured items to detect unauthorised refilling

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US16/117,120 Continuation US10621392B2 (en) 2014-06-23 2018-08-30 Method and system for marking manufactured items to detect unauthorized refilling

Publications (2)

Publication Number Publication Date
US20170109549A1 US20170109549A1 (en) 2017-04-20
US10068111B2 true US10068111B2 (en) 2018-09-04

Family

ID=51167582

Family Applications (2)

Application Number Title Priority Date Filing Date
US15/317,517 Active US10068111B2 (en) 2014-06-23 2015-06-19 Method and system for marking manufactured items to detect unauthorized refilling
US16/117,120 Active US10621392B2 (en) 2014-06-23 2018-08-30 Method and system for marking manufactured items to detect unauthorized refilling

Family Applications After (1)

Application Number Title Priority Date Filing Date
US16/117,120 Active US10621392B2 (en) 2014-06-23 2018-08-30 Method and system for marking manufactured items to detect unauthorized refilling

Country Status (6)

Country Link
US (2) US10068111B2 (zh)
EP (1) EP3158679B1 (zh)
JP (2) JP2017520216A (zh)
CN (1) CN106688205A (zh)
RU (1) RU2698768C2 (zh)
WO (1) WO2015197494A1 (zh)

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3051469B1 (en) 2015-01-28 2024-05-22 Inexto Sa Method and apparatus for unit and container identification and tracking
PL3051372T3 (pl) 2015-01-31 2019-10-31 Inexto Sa Zabezpieczona identyfikacja i weryfikacja produktu
US20180205543A1 (en) 2015-08-13 2018-07-19 Inexto Sa Enhanced obfuscation or randomization for secure product identification and verification
EP3342122B1 (en) 2015-08-25 2020-08-19 Inexto Sa Multiple authorization modules for secure production and verification
CN108140076B (zh) 2015-08-25 2022-04-05 英艾克斯图股份有限公司 用于安全产品标识符的具有容错的验证
EA035937B1 (ru) * 2015-12-31 2020-09-03 Инексто Са Защищенная идентификация предмета на основании физических свойств ярлыка
PL3190065T5 (pl) 2016-01-08 2022-09-05 Reemtsma Cigarettenfabriken Gmbh Opakowanie ze wzorem kodującym informację, wykrywanym przez pojemnościowy ekran dotykowy
US11669927B2 (en) 2018-03-14 2023-06-06 Tetra Laval Holdings & Finance, S.A. Providing unique codes on packages for liquid food
CN109436555A (zh) * 2018-10-18 2019-03-08 上海中商网络股份有限公司 用于防伪溯源的身份标识的生成方法、容器盖和装置
US20200160006A1 (en) * 2018-11-21 2020-05-21 Peter Godwin Systems and Methods for Authenticating an Item
CN109871915A (zh) * 2018-12-19 2019-06-11 深圳市欧珀软件科技有限公司 物料信息标注方法以及标注系统
US10810394B2 (en) 2019-03-06 2020-10-20 Owens-Brockway Glass Container Inc. Authentication of a container and/or product packaged therein
US11972440B1 (en) * 2020-06-05 2024-04-30 Trace Labs Llc Systems and methods for providing a decentralized anti-counterfeit solution for supply chain tracking using single-use codes

Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5646389A (en) 1990-11-13 1997-07-08 Symbol Technologies, Inc. Inventory management system using coded re-order information
US6547137B1 (en) 2000-02-29 2003-04-15 Larry J. Begelfer System for distribution and control of merchandise
US20050288938A1 (en) 2002-08-30 2005-12-29 Munehiro Date Method for preventing false indication in commodity distribution and label write device having false alteration prevention function used for the same
EP1645992A1 (en) 2004-10-08 2006-04-12 Philip Morris Products S.A. Methods and systems for marking, tracking and authentication of products
US20070203808A1 (en) 2004-05-31 2007-08-30 Densel-Lambda Kabushiki Kaisha Product management system
US20090230190A1 (en) 2008-03-17 2009-09-17 Philip Morris Usa Inc. Method and apparatus for identifying, authenticating, tracking and tracing manufactured items
WO2010063909A2 (fr) 2008-12-04 2010-06-10 Advanced Track & Trace (Sas) Procédé et dispositif de protection d'un récipient et étiquette pour leur mise en oeuvre.
US20120228388A1 (en) * 2011-03-11 2012-09-13 China Steel Corporation Anti-counterfeiting bottle
US20120254052A1 (en) * 2011-04-04 2012-10-04 Gao Zeming M Anti-counterfeiting marking with dual-code and partial concealment
US20120310848A1 (en) * 2011-05-31 2012-12-06 Gao Zeming M Anti-counterfeiting marking with asymmetrical concealment
US20140046852A1 (en) 2010-12-30 2014-02-13 Philippe Chatelain Method and apparatus for marking manufactured items
US20150310386A1 (en) 2009-12-22 2015-10-29 Philip Morris Usa Inc. Method and apparatus for storage of data for manufactured items
US20150317644A1 (en) 2012-12-17 2015-11-05 Philip Morris Products S.A. Method and apparatus for marking manufactured items using physical characteristic
US20150332210A1 (en) 2012-12-17 2015-11-19 Philip Morris Products S.A. Method and apparatus for storage of data for tracking manufactured items
US20160027021A1 (en) * 2014-07-24 2016-01-28 Andrew Kerdemelidis Product Authenticator
US20160307153A1 (en) 2012-12-21 2016-10-20 Kezzler As Method and system for storing and retrieving packaging relationships

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2199781C1 (ru) * 2001-07-20 2003-02-27 Ямилев Ильгиз Амирович Способ маркировки товара, или изделия, или конструкции с последующей идентификацией (варианты) и система проведения идентификации товара или изделия, или конструкции с указанной маркировкой (варианты)
RU2225641C2 (ru) * 2002-01-24 2004-03-10 Слепов Анатолий Алексеевич Способ защиты от подделки изделий массового изготовления
JP2003233794A (ja) * 2002-02-07 2003-08-22 Hitachi Ltd 無線タグ、商品、商品付随物、商品セット、リーダ、印刷機、情報加工方法、及び判定方法
US7055691B2 (en) 2004-02-27 2006-06-06 Owens-Illinois Healthcare Packaging Inc. Plastic packaging having embedded micro-particle taggants
US7309011B2 (en) 2004-10-29 2007-12-18 Symbol Technologies, Inc. Method of authenticating products using hardware compatibility flag
JP2006229582A (ja) * 2005-02-17 2006-08-31 Ricoh Co Ltd 文書処理装置、画像形成装置及び文書処理プログラム
GB2430783B (en) * 2005-10-03 2010-12-22 Fracture Code Corp Aps Two-part code
EP2809030A3 (fr) * 2006-02-03 2015-04-22 Advanced Track And Trace Procédé et dispositif d'authentification
CN101529448B (zh) * 2006-08-30 2015-02-18 贝克顿·迪金森公司 多条形码格式标签系统和方法
CN101354753B (zh) * 2008-09-10 2010-09-29 张其善 产品标签制作方法、产品真伪检验方法与系统
CN101609626A (zh) * 2009-07-10 2009-12-23 烟台东方瑞创达电子科技有限公司 产品防伪防窜货的附标方法
US8875495B2 (en) * 2010-08-06 2014-11-04 GM Global Technology Operations LLC Tank assembly and method
US8839459B2 (en) 2010-09-22 2014-09-16 Qualcomm Incorporated Product authentication using end-to-end cryptographic scheme
CN102542215A (zh) * 2010-12-13 2012-07-04 杭州华杭科技有限公司 一次性容器的双签认证法
CN103186863A (zh) * 2011-12-30 2013-07-03 鸿富锦精密工业（深圳）有限公司 防伪方法及应用该防伪方法的产品

Patent Citations (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5646389A (en) 1990-11-13 1997-07-08 Symbol Technologies, Inc. Inventory management system using coded re-order information
US6547137B1 (en) 2000-02-29 2003-04-15 Larry J. Begelfer System for distribution and control of merchandise
US20050288938A1 (en) 2002-08-30 2005-12-29 Munehiro Date Method for preventing false indication in commodity distribution and label write device having false alteration prevention function used for the same
US20070203808A1 (en) 2004-05-31 2007-08-30 Densel-Lambda Kabushiki Kaisha Product management system
EP1645992A1 (en) 2004-10-08 2006-04-12 Philip Morris Products S.A. Methods and systems for marking, tracking and authentication of products
US20080046263A1 (en) 2004-10-08 2008-02-21 Alain Sager Methods and Systems for Making, Tracking and Authentication of Products
US20090230190A1 (en) 2008-03-17 2009-09-17 Philip Morris Usa Inc. Method and apparatus for identifying, authenticating, tracking and tracing manufactured items
WO2010063909A2 (fr) 2008-12-04 2010-06-10 Advanced Track & Trace (Sas) Procédé et dispositif de protection d'un récipient et étiquette pour leur mise en oeuvre.
US20150310386A1 (en) 2009-12-22 2015-10-29 Philip Morris Usa Inc. Method and apparatus for storage of data for manufactured items
US20140046852A1 (en) 2010-12-30 2014-02-13 Philippe Chatelain Method and apparatus for marking manufactured items
US20120228388A1 (en) * 2011-03-11 2012-09-13 China Steel Corporation Anti-counterfeiting bottle
US20120254052A1 (en) * 2011-04-04 2012-10-04 Gao Zeming M Anti-counterfeiting marking with dual-code and partial concealment
US20120310848A1 (en) * 2011-05-31 2012-12-06 Gao Zeming M Anti-counterfeiting marking with asymmetrical concealment
US20150317644A1 (en) 2012-12-17 2015-11-05 Philip Morris Products S.A. Method and apparatus for marking manufactured items using physical characteristic
US20150332210A1 (en) 2012-12-17 2015-11-19 Philip Morris Products S.A. Method and apparatus for storage of data for tracking manufactured items
US20160307153A1 (en) 2012-12-21 2016-10-20 Kezzler As Method and system for storing and retrieving packaging relationships
US20160027021A1 (en) * 2014-07-24 2016-01-28 Andrew Kerdemelidis Product Authenticator

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
Bernardi, P. et al., "An Anti-Counterfeit Mechanism for the Application Layer in Low-Cost RFID Devices", Circuits and Systems for Communications, 2008, ECCSC 2008, 4th European Conference ON, IEEE, Piscataway, N.J. USA, Jul. 10, 2008, pp. 227-231, XP031315029.
PCT Search Report and Written Opinion for PCT/EP2015/063839 dated Sep. 7, 2015 (11 pages).

Also Published As

Publication number Publication date
RU2017101823A3 (zh) 2019-01-14
BR112016029881A2 (pt) 2017-08-22
CN106688205A (zh) 2017-05-17
US20180373903A1 (en) 2018-12-27
EP3158679B1 (en) 2021-10-27
US10621392B2 (en) 2020-04-14
WO2015197494A1 (en) 2015-12-30
WO2015197494A8 (en) 2016-04-14
RU2017101823A (ru) 2018-07-23
RU2019115357A (ru) 2019-06-27
JP2017520216A (ja) 2017-07-20
JP2020065309A (ja) 2020-04-23
US20170109549A1 (en) 2017-04-20
RU2698768C2 (ru) 2019-08-29
JP6883676B2 (ja) 2021-06-09
EP3158679A1 (en) 2017-04-26

Similar Documents

Publication Publication Date Title
US10621392B2 (en) Method and system for marking manufactured items to detect unauthorized refilling
US10121151B2 (en) Method and apparatus for marking manufactured items using physical characteristic
US20220309517A1 (en) Methods and systems for making, tracking and authentication of products
WO2006113241A2 (en) Method and system for shipment authentication
RU2787209C2 (ru) Способ и система для маркировки готовых изделий с целью обнаружения несанкционированного повторного заполнения
BR112016029881B1 (pt) Método para marcar um item fabricado, método de autenticação de um item fabricado, aparelho para marcar um item fabricado, e item fabricado compreendendo um recipiente e uma tampa

Legal Events

Date Code Title Description
AS Assignment

Owner name: INEXTO SA, SWITZERLAND

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:FRADET, ERWAN PIERRE MARIE;CHANEZ, PATRICK;CHATELAIN, PHILIPPE;REEL/FRAME:041361/0946

Effective date: 20170202

STCF Information on status: patent grant

Free format text: PATENTED CASE

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 4